2025 Realistic PSE-Prisma-Pro-24 Dumps Questions To Gain Brilliant Result [Q57-Q79]

5/5 - (1 vote)

2025 Realistic PSE-Prisma-Pro-24 Dumps Questions To Gain Brilliant Result

Start your PSE-Prisma-Pro-24 Exam Questions Preparation with Updated 118 Questions

NO.57 When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

Group2 / SHA-1 / AES-128-CBC / IKE-V1

Group2 / SHA-1 / AES-128-GCM / IKE-V1

Group14 / SHA-256 / AES-256-GCM / IKE-V1

Group2 / SHA-1 / AES-128-CBC

Group14 / SHA-256 / AES-256-CBC / IKE-V1

NO.58 What happens in Prisma Cloud after Training Model Threshold or Alert Disposition is changed?

Changes will take effect after a new learning phase of 30 days.

System will perform a reboot, deleting all past alerts.

Existing alerts and new alerts are regenerated based on the new setting.

New alerts are generated based on the new setting.

NO.59 Which two cloud-native providers are supported by Prisma Cloud? (Choose two.)

DigitalOcean

Azure

IBM Cloud

Oracle Cloud

NO.60 Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?

Palo Alto Networks provides full support if a valid support license is in place.

Support for the templates is available through Professional Services from Palo Alto Networks.

Unless otherwise noted, these templates are released under an as-is. best effort support policy.

The author of the template provides full support as long as the PAN-OS version specific to the template is supported.

NO.61 What resource is required to receive inbound traffic from the internet to VM-Series NGFW deployed as a gateway for Azure Stack workloads?

Public IP for the VM-Series NGFW

NAT appliance

Azure Stack Edge Router

Border Customer Network

NO.62 Match the logging service with its cloud provider.

Explanation:
AWS, Azure, GCP, Azure, AWS, GCP

NO.63 Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

Explanation:
longest, shortest, path, lowest multi, lowest peer

NO.64 Which Prisma Public Cloud policy alerts administrators to unusual user activity?

Anomaly

Audit Event

Network

Configuration

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/anomaly- policies.html

NO.65 Which two cloud providers provide egress load balancing? (Choose two.)

Microsoft Azure

Alibaba Cloud

Amazon Web Services

Oracle Cloud

NO.66 Which Resource Query Language (RQL) query returns a list of all Azure SQL Databases that have transparent data encryption turned in?

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ and json.rule = is TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ = TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list* and json.rule == status TERMINATED

config from cloud.resource where api.name = ‘gcloud-compute-instances-list’ and json.rule = status contains TERMINATED

NO.67 What is required for an EC2 instance to access the internet directly from an AWS VPC?

Internet Gateway

Transit Gateway

Virtual Private Gateway

Customer Gateway

NO.68 Which statement applies to vulnerability management policies?

Host and serverless rules support blocking, whereas container rules do not.

Rules explain the necessary actions when vulnerabilities are found in the resources of a customer environment.

Policies for containers, hosts, and serverless functions are not separate.

Rules are evaluated in an undefined order.

NO.69 A customer CSO has asked you to demonstrate how to identify all “Amazon RDS” resources deployed and the region that they are deployed in. What are two ways that Prisma Public Cloud can show the relevant information?(Choose two.)

Generate a compliance report from the Compliance dashboard

Write an RQL query from the “Investigate” tab.

Configure an Inventory report from the “Alerts” tab

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

NO.70 All Amazon Regional Database Service (RDS)-deployed resources and the regions in which they are deployed can be identified by prisma Cloud using which two methods? (Choose two.)

Configure an Inventory report from the “Alerts” tab.

Write an RQL query from the “Investigate” tab.

Open the Asset dashboard, filter on Amazon Web Services, and click “Amazon RDS” resources.

Generate a compliance report from the Compliance dashboard.

NO.71 Which two actions are appropriate when configuring Prisma Cloud to scan a registry? (Choose two.)

Allow Prisma Cloud to automatically distribute the scan job across a pool of available Defenders.

Explicitly specify the Defender to do the job.

Allow Prisma Cloud to automatically optimize registry scans with version pattern matching.

Explicitly specify the predefined version pattern-matching algorithm.

NO.72 What are two business values of Cloud Code Security? (Choose two.)

consistent controls from build time to runtime

prebuilt and customizable polices to detect data such as personally identifiable information (PII) in publicly exposed objects

support for multiple languages, runtimes and frameworks

continuous monitoring of all could resources for vulnerabilities, misconfigurations, and other threats

NO.73 Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Traps

Prisma SaaS

Amazon Web Services WAF

VM-Series firewalls

Security Groups

NO.74 Which Google Cloud Platform project shares its VPC networks with other projects?

Service project

Host project

Admin project

Subscribing project

Create a shared VPC using the Trust VPC created when you deployed the firewall template.
Set up a shared VPC for the host (firewall) project:
gcloud compute shared-vpc enable HOST_PROJECT_ID
https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on- google-cloud-platform/autoscaling-on-google-cloud-platform/deploy-autoscaling-on-google-cloud.html

NO.75 Which RQL string returns a list of all Azure virtual machines that are not currently running?

config where api.name = ‘azure-vm-list’ AND json.rule = powerState = “off’

config where api.name = ‘azure-vm-list’ AND json.rule = powerState does not contain “running”

config where api.name = ‘azure-vm-list’ AND json.rule = powerState = “running”

config where api.name = ‘azure-vm-list’ AND json.rule = powerState contains “running”

NO.76 Which statement explains the correlation between the block and alert thresholds in a vulnerability management policy?

The thresholds can be set to informational, low, medium, high, and critical.

The alert threshold always has precedence over, and can be greater than, the block threshold.

The block threshold must always be equal to or greater than the alert threshold.

The block threshold always has precedence over, and can be less than, the alert threshold.

NO.77 How can all alerts related to “Amazon RDS” be quickly identified within the Prisma Cloud dashboard?

Generate a Center for Internet Security (CIS) compliance report and search for “Amazon RDS” policy violations.

View the alert data on the “Asset Inventory” dashboard and filter on “Amazon RDS.

Within the “Alerts” tab. filter on “Amazon RDS” as a service.

Create a custom Resource Query Language (RQL) configuration report.

NO.78 A Prisma Cloud Administrator has been asked to create a custom policy which notifies the InfoSec team each time a configuration mange is made to a Security group.
Which type of Resource Query Language (RQL) query would be used in this policy?

audit from

network from

event from

config from

NO.79 Under which operating systems (OSs) is twistcli supported?

Linux, macOS, and Windows

Windows only

Linux and Windows

Linux, macOS, PAN-OS, and Windows

Loading …